CVE-2012-5167

Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to execute arbitrary SQL commands via the (1) field parameter to course_category/index_inline_editor_submit.php or (2) user/index_inline_editor_submit.php; or (3) id parameter to user/user_password.php.

• CWE-89

• http://archives.neohapsis.com/archives/bugtraq/2012-10/0095.htmlExploit
• http://osvdb.org/86424
• http://osvdb.org/86425
• http://secunia.com/advisories/51014Vendor Advisory
• http://secunia.com/advisories/51034Vendor Advisory
• http://update.atutor.ca/acontent/patch/1_2/Patch
• http://www.securityfocus.com/bid/56100Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79459
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79460
• https://www.htbridge.com/advisory/HTB23117Exploit
• http://archives.neohapsis.com/archives/bugtraq/2012-10/0095.htmlExploit
• http://osvdb.org/86424
• http://osvdb.org/86425
• http://secunia.com/advisories/51014Vendor Advisory
• http://secunia.com/advisories/51034Vendor Advisory
• http://update.atutor.ca/acontent/patch/1_2/Patch
• http://www.securityfocus.com/bid/56100Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79459
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79460
• https://www.htbridge.com/advisory/HTB23117Exploit

Published

Oct 22, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-5159phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mi…
• CVE-2012-5161The XML Service interface in Citrix XenApp 6.5 and 6.5 Featu…
• CVE-2012-5162Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax…
• CVE-2012-5163Cross-site scripting (XSS) vulnerability in oc-admin/ajax/aj…
• CVE-2012-5164Multiple cross-site scripting (XSS) vulnerabilities in Fork …
• CVE-2012-5166ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x b…
• CVE-2012-5168ATutor AContent before 1.2-1 allows remote attackers to modi…
• CVE-2012-5169Multiple cross-site scripting (XSS) vulnerabilities in file_…
• CVE-2012-5170Open redirect vulnerability in Pebble before 2.6.4 allows re…
• CVE-2012-5171Directory traversal vulnerability in Be Graph BeZIP before 3…
• CVE-2012-5172The Asial Monaca Debugger application before 1.4.2 for Andro…
• CVE-2012-5173Session fixation vulnerability in BIGACE before 2.7.8 allows…